Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
Chapter 2 Configuring Routing and Delivery Features
2-62
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Working with Destination Controls
Use the Mail Policies > Destination Controls page in the GUI or the
destconfig
command in the CLI to create, edit, and delete Destination Control entries.
Controlling the Number of Connections, Messages, and Recipients to a Domain
You may want to limit how your appliance will deliver email to avoid
overwhelming remote hosts or your own internal groupware servers with email
from your appliance.
overwhelming remote hosts or your own internal groupware servers with email
from your appliance.
For each domain, you can assign a maximum number of connections, outbound
messages, and recipients that will never be exceeded by the system in a given time
period. This “good neighbor” table is defined through the Destination Controls
feature (Mail Policies > Destination Controls or the
messages, and recipients that will never be exceeded by the system in a given time
period. This “good neighbor” table is defined through the Destination Controls
feature (Mail Policies > Destination Controls or the
destconfig
command —
previously the
setgoodtable
command). You can specify the domain name using
the following syntax:
domain.com
or
.domain.com
This syntax enables AsyncOS to specify destination controls for sub-domains
such as sample.server.domain.com without entering each full subdomain address
individually.
such as sample.server.domain.com without entering each full subdomain address
individually.
For connections, messages, and recipients, you set whether the limits you define
are enforced for each Virtual Gateway address, or for the entire system. (Virtual
Gateway address limits control the number of concurrent connections per IP
interface. System-wide limits control the total number of connections the Cisco
IronPort appliance will allow.)
are enforced for each Virtual Gateway address, or for the entire system. (Virtual
Gateway address limits control the number of concurrent connections per IP
interface. System-wide limits control the total number of connections the Cisco
IronPort appliance will allow.)
You also set whether the limits you define are enforced for each MX record of the
specified domain, or for the entire domain. (Many domains have multiple MX
records defined for accepting email.)
specified domain, or for the entire domain. (Many domains have multiple MX
records defined for accepting email.)
Note
The current system default is 500 connections per domain and 50 messages per
connection.
connection.